# Context7 plugin

The Context7 plugin lets a Vaubaan Gateway mission use Context7 without handing the agent a credential. Look up current library documentation with Context7, through the official Context7 MCP server.

- Version: `0.1.0` (package `@vaubaan/plugin-context7`)
- Status: stable
- Health: not enough reports yet — [what this means](/plugins/health)
- Source: [plugins/context7](https://github.com/vaubaan/gateway/tree/main/plugins/context7), catalog [risk-catalog.yaml](https://github.com/vaubaan/gateway/blob/main/plugins/context7/src/risk-catalog.yaml) version 1 of 2026-10-16
- How to connect an account: [Connect Context7](/docs/providers/context7)
- How it is modelled: [handbook](https://github.com/vaubaan/gateway/blob/main/docs/handbook/providers/context7.md)

One account is a Context7 API key of a teamspace. It has one resource, the library index the key can query: the public libraries its teamspace policies allow and its private sources. The documentation questions an agent asks are sent to Context7. There is no environment.

## Permissions

Each permission is a named risk of the plugin's catalog: a mission holds an explicit list of them, never "all". The severity is computed from the permission's six axes (undo, blast radius, data, cost, visible to, lasts); nothing is decided from it.

| Permission | What it allows | Severity | Why it is a risk |
| --- | --- | --- | --- |
| `context7.query-docs` | Ask Context7 about library documentation | medium | The question the agent writes, which may carry code or internal context, is sent to Context7, a third party that stores queries; the documentation that comes back is third-party text. Each call also spends the key's monthly Context7 quota. |
| `context7.uncategorized-write` | Uncategorized write | high (the catch-all: touched only by a call no other permission covers) | Catch-all for writes without a dedicated entry. No Context7 tool of this plugin writes. |

## Presets

A preset pre-fills the permissions of a mission for one account, with a limit per period, a rate and whether each permission runs freely or asks the mission creator first. The person creating the mission adjusts it; the mission stores the explicit list.

### Read-only

`read-only` — Ask Context7 about library documentation. The questions the agent writes are sent to Context7.

| Permission | What it allows | Limit per period | Rate | Runs |
| --- | --- | --- | --- | --- |
| `context7.query-docs` | Ask Context7 about library documentation | 300 | 20 per minute | runs freely |

## Tools

| Tool | What it does |
| --- | --- |
| `context7__resolve-library-id` | Find a library in Context7 |
| `context7__query-docs` | Read a library's documentation |

## Health

Health: not enough reports yet. A plugin version is deemed validated by the community with at least 200 reports and 90 % of them successful, over the last 90 days, as reported by the instances whose operators turned community telemetry on. It is a community signal, not a security guarantee.